cert domain from app host